These Two 14-Year-Olds Hacked an ATM in Winnipeg Using an Online Manual


Two 14-year-olds are making headlines today for hacking into an ATM machine in Winnipeg using a programming manual they found online.

“The Grade 9 students, Matthew Hewlett and Caleb Turon, used an ATM operators’ manual they found online to get into the administrator mode of an ATM at a Safeway grocery store,” wrote “They saw how much money was in the machine, how many transactions there had been and other information usually off-limits for the average bank customer.”

In a not-so-unpredictable-in-2014 twist, the two youngsters managed to crack the ATM’s password on the first try, a result of BMO’s machine using one of the factory default passwords that had apparently never been changed.

When Hewlett and Turon told a local BMO branch what they did, the bankers at first didn’t even believe them. I can only imagine how tech-savvy BMO execs in Toronto would have reacted to that news, had the pair have chosen to act in a malicious manner. Instead they simply went back to the Safeway, gathering printouts from the ATM that clearly showed the machine had been compromised.

“The teens even changed the machine’s greeting from ‘Welcome to the BMO ATM’ to ‘Go away. This ATM has been hacked,'” wrote

Apparently the BMO manager had to write the students a few notes to explain their absence from school. The notes started with ““Please excuse Mr. Caleb Turon and Matthew Hewlett for being late during their lunch hour due to assisting BMO with security.”

While a story like this isn’t uncommon in Canada in 2014, the way the institution in question reacted is rather unique. It seems that when youngsters hack into a web portal, and then explain to higher authorities that they should probably take better security precautions, such actions isn;t always appreciated.

I must commend BMO for their behaviour in this instance. Last year Ethan Cox broke a story for the Financial Post, revealing how two students, then studying at Montreal’s CEGEP (General and Vocational Colleges), Dawson College, had hacked into the school’s computer system. There they could have compromised the personal information of over 250,000 students. When Hamed Al-Khabaz and Ovi Mija told the school, they were suspended.

I reported for the Financial Post later that summer that they had launched their own startup, Outpost Travel. Outpost Travel has since raised a $200,000 seed round of funding from angel investors.

With their incident at Dawson College though, the school took a bit of a hit in the ensuing public backlash that saw many condemning the school for its actions. Here it seems that BMO chose to be appreciative of the two youngster’s reportings.

Joseph Czikk

Joseph Czikk

Joseph Czikk previously has written for the National Post, Montreal Gazette, Vancouver Sun, Regina Leader Post, Techvibes and BC Business Online. Joseph often goes crazy on twitter during NHL and NFL games.

  • Mrs Kate

    I am Mr Brown Willson who lives in the UNITED STATE OF AMERICA, i want to use this meduim to thank Mr James Freeman who help me with an already hacked atm machine card and i was as poor without funds so i was browsing one day and i saw somebody testifying how Mr James Freeman help him from being poor to a rich guy through this already hacked atm card and today am also testifying on how he helped me. i never believe in it until they send me the card which am using today if you want to confirm from me how help me this is my email address i want you to work hand in hand with him and you will leave the life of being poor this is his email address, contact him now he is ready to supply you any amount of the card you need.

  • Peggy Lora

    My name is Peggy Lora me and my husband are here to testify about how we use Meyer ATM black card to make money and also have our own business today. Go get your blank ATM card today and be among the lucky ones. This PROGRAMMED blank ATM card is capable of hacking into any ATM machine,anywhere in the world.It has really changed our life for good and now we can say we are rich and we can never be poor again. You can withdraw the maximum of $ 10,000 daily We can proudly say our business is doing fine and we have up to 20,000 000 (20 millions dollars in our account) Is not illegal,there is no risk of being caught ,because it has been programmed in such a way that it is not traceable,it also has a technique that makes it impossible for the CCTV to detect you..For details and cost on how to get yours today, email the hackers on : or text +1 631 500 4609 And they also give out loan of 2 %.